Is Merlin more secure and better performing than the stock firmware?

[Rob Q]

I'm trying to find a way to make my home network more secure and was just wondering if Merlin over the stock ASUS firmware would help.
I'm aware that Merlin is updated more frequently.
My router is an RT-AC1900P with firmware version 3.0.0.4.384_45149.
What are your thoughts?
I was looking at the Merlin wiki and other info about it but I was wondering how would it run against the latest stock Asuswrt (December 8, 2018 update)? Like a side-by-side comparison perhaps.

 

[skeal]

I'm trying to find a way to make my home network more secure and was just wondering if Merlin over the stock ASUS firmware would help.
I'm aware that Merlin is updated more frequently.
My router is an RT-AC1900P with firmware version 3.0.0.4.384_45149.
What are your thoughts?
I was looking at the Merlin wiki and other info about it but I was wondering how would it run against the latest stock Asuswrt (December 8, 2018 update)? Like a side-by-side comparison perhaps.

Merlin has no imesh support. I would say that the f/w has more features and a better environment for security with script support.

 

[scjr]

Hi Rob,

I have the same router as you and Merlin runs great on it. Check out just this one post from RMerlin and you get a real sense how security minded his project is:

https://www.snbforums.com/threads/r...-6-is-now-available.47941/page-36#post-433712

I would recommend you run Merlin, unless you need AiMesh.

 

[Rob Q]

I really don't need AiMesh. My house is too small and that really would be a waste of money.

 

[HuskyHerder]

Hi Rob,

I have the same router as you and Merlin runs great on it. Check out just this one post from RMerlin and you get a real sense how security minded his project is:

https://www.snbforums.com/threads/r...-6-is-now-available.47941/page-36#post-433712

I would recommend you run Merlin, unless you need AiMesh.

Or run a mesh router in AP mode off of the Merlin router. Like myself, courtesy of some great help from @JDB Wonderful solution for both worlds. A little more expensive to setup, but I purchased 90% of my setup off eBay, and yes they are true 68u's.

 

[jerry6]

I'D SAY go merlin gives you more options and merlin is quicker with security patches

 

[kernol]

And his a nice guy!?

More than that - Merlin is a "magician" to all who have deployed his firmware [150,000+ happy campers who use it].
Once installed it opens up the possibility of adding security and ad blocking features provided by other experts.

I heartily recommend the following for your security concerns: -

https://www.snbforums.com/threads/diversion-the-router-ad-blocker.48538/

https://www.snbforums.com/threads/skynet-asus-firewall-addition.16798/

and to really improve your internet throughput ...

https://www.snbforums.com/threads/r...ements-custom-rules-and-inner-workings.36836/

finally - if you want to provide guest wifi which has no access to your private home network ...

https://www.snbforums.com/threads/yazfi-enhanced-asuswrt-merlin-guest-wifi-networks.45924/

There are many other useful tweaks you will discover on this forum [besides having a FAR more stable firmware] - enjoy the journey

 

[Rob Q]

I heartily recommend the following for your security concerns: -

https://www.snbforums.com/threads/diversion-the-router-ad-blocker.48538/

https://www.snbforums.com/threads/skynet-asus-firewall-addition.16798/

I've seen a bunch of users here use those two. I'm all new to this so I'm not sure if those will block the 'good and legit' sites, like popups from a real website that needs to come up but if diversion is just for blocking ad's, could come in handy. Especially those annoying video ads that just start playing out of nowhere. Maybe it might help on the Roku also? I'm sure Skynet might be better than the standard Trendmicro AiProtect.

 

[JaimeZX]

Skynet also takes inputs from AIProtect if you enable that option. Merlin gives you many choices. My "n00b install thread" might be of use to you. (See sig.)

 

[kernol]

I've seen a bunch of users here use those two. I'm all new to this so I'm not sure if those will block the 'good and legit' sites, like popups from a real website that needs to come up but if diversion is just for blocking ad's, could come in handy. Especially those annoying video ads that just start playing out of nowhere. Maybe it might help on the Roku also? I'm sure Skynet might be better than the standard Trendmicro AiProtect.

The thread suggested by Jaime is the best place to go after Merlin is installed ...
https://www.snbforums.com/threads/h...ab-solution-pixelserv-tls-and-dnscrypt.45744/

Diversion used to be called ab-solution ... but the new name is far better as it does a lot more than block adverts [which it does really well] - it also "diverts" a significant amount of telemetry ... that spyware that lurks in GatesWare / Google / Facebook etc.
Combined with Skynet - you have a massive amount of malicious sites blocked before they can get through your router. You will be amazed when you see the stats within Skynet proving the thousands of daily snooping attempts that are blocked.

 

[Rob Q]

Would these extra addons stop those ISP surveys from coming through? Lately everytime my mom goes to MSN.ca a website takes over and plays a very loud tone with the volume on max and says 'You have a virus' (even though that is complete bull sh!$). Not sure if that would require a patch for MS Edge or some bad site coming in through the router.

 

[Rob Q]

Would be nice to stop my mom's laptop from being targeted with all that crap.

My laptop is up there twice because it's seeing the built-in Wifi and my USB 802.11ac adapter.

 

[JaimeZX]

If AI Protect is seeing it, then it's also blocking it, so feel good about that!

Skynet does a daily download of know malicious IPs and blocks them automatically. I can't say if it'll help your specific issue, but it can't hurt! Currently Skynet is blocking 148,947 IPs. (Malicious sites plus China, Iran, North Korea, Russia, and Ukraine.)

 

[Rob Q]

Step one, complete.

In that guide it says to use a 1GB USB stick, is that actually big enough for everything?

 

[JaimeZX]

Yes, but frankly I can't find a 1GB stick anymore. Had to buy a 4GB stick. Never hurts to have more!
(Skynet's swap file default size is 512MB I think.)

 

[sfx2000]

I'm trying to find a way to make my home network more secure and was just wondering if Merlin over the stock ASUS firmware would help.

To be honest - if your needs are simple, you're probably ok with factory firmware... as Asus has a direct mandate to ensure security (long story)

If you want to extend things and tinker about with items - then the RMerlin builds can be very interesting...

 

[SMS786]

In that guide it says to use a 1GB USB stick, is that actually big enough for everything?

512MB stick here with Entware, Diversion, Skynet, pixelserv, and dnscrypt. Oh and also a 256MB swap file

 

[RMerlin]

Would be nice to stop my mom's laptop from being targeted with all that crap.
View attachment 15673

My laptop is up there twice because it's seeing the built-in Wifi and my USB 802.11ac adapter.

The laptop has malware installed. which is constantly trying to access malicious websites. You need to clean it up.

 

[kernol]

Fully agree with RMerlin [the author of the firmware you are now using] - Mom's laptop has a lurgy lurking in it and needs to be cleaned up.

Diversion will likely block the kind of "ads" that contain this malware [usually a suggestion to follow a link to clean up your PC ... meanwhile it actually infects the PC]!

Skynet goes beyond the stock firmware protection and will provide more detailed reports on the malware sites it has actually blocked.

Of course when "Mom" goes mobile with her laptop and leaves the Merlin / Diversion / pixelserv-tls / Skynet protected home wifi - the chances are some malware may once again infect her laptop. A good anti-virus / anti-malware program on the laptop - plus a little "education" on things to avoid will go a long way.

However - search this forum and you will find guidance on setting up a home VPN server through which you can direct all mobile devices - so even when they are not "at home" they can automatically connect via mobile networks through your VPN server to continue enjoying the protection your home Asus-Merlin router provides.

 

[Rob Q]

512MB stick here with Entware, Diversion, Skynet, pixelserv, and dnscrypt. Oh and also a 256MB swap file

Then I'm not going to worry about my 1GB (984MB) stick being to small. lol